OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-94658

HIGH · CVSS 8.7 EPSS 0.43%

Source: NVD + CISA KEV + EPSS · Published 2026-10-02 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

Apache Thrift Lua bindings prior to version 0.25.0 are vulnerable to an inefficient algorithmic complexity issue, which could lead to denial of service through resource exhaustion. Organizations utilizing affected versions should prioritize upgrading to 0.25.0 to mitigate potential service disruptions and ensure system stability.

CVE
CVE-2026-94658
Severity
HIGH
CVSS
8.7
EPSS
0.43%
Apache

Original NVD Description

Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.